Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File:                     qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier:          3tp+m/GklYQdpJ7vOFrmS+Qs1Q0+Z/Obmz9SCUlpfds=
Subject key identifier:   7D:2F:47:98:30:4E:32:B2:89:8D:83:C1:2D:BF:51:7B:0C:B4:C9:B5
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer:       /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial:       01962ECF87ED4C3C68846B0B8B7CD15C400A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
                          2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
                          3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: yhObIqqVn0J3GRh/nU6C5Cgdljg5vp45lc90Z9MUN5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:87:ed:4c:3c:68:84:6b:0b:8b:7c:d1:5c:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=7d2f4798304e32b2898d83c12dbf517b0cb4c9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:52:1b:a2:85:0c:5b:f0:ca:7b:d1:c9:6a:
                    bc:13:e1:9a:6d:9c:a0:b0:b1:67:b3:58:ee:e9:79:
                    bb:72:a8:1a:64:a8:48:dd:ec:c2:77:27:29:e1:ef:
                    17:29:db:1b:0f:7b:28:dc:79:47:b6:57:17:bb:64:
                    c3:69:0f:90:38:a3:ee:09:86:bf:4c:4f:35:0b:03:
                    1c:5a:ee:71:36:23:a9:8b:67:a7:d0:72:06:c4:a3:
                    7d:21:c1:ee:55:7e:25:07:e4:cd:ac:dc:44:ab:fa:
                    05:e5:68:80:fc:e6:cf:14:bb:ee:b5:a5:b1:54:f9:
                    9d:be:62:be:f0:d9:08:03:10:aa:7a:ad:d4:0b:02:
                    b8:ca:80:b5:75:80:d5:97:77:8b:04:63:3c:a0:9f:
                    c8:02:ae:ea:eb:c2:91:14:c4:01:1c:90:f0:74:bf:
                    b8:37:da:08:79:6e:9d:50:e5:2f:8c:f9:cb:2a:e5:
                    d0:6e:00:61:6e:f8:6e:3d:04:05:75:9b:a2:5d:30:
                    0e:43:e5:90:b6:c2:c7:9e:c8:14:e8:8b:08:29:3d:
                    94:f9:a8:b6:ea:64:04:1e:62:72:23:01:0e:ce:b8:
                    0f:59:b0:48:05:0b:fb:ac:74:0c:7a:9a:a0:86:2f:
                    c0:ff:0d:13:7c:f8:44:5a:f0:07:65:c9:07:41:62:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:47:98:30:4E:32:B2:89:8D:83:C1:2D:BF:51:7B:0C:B4:C9:B5
            X509v3 Authority Key Identifier:
                keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:28:f1:a7:4d:d7:02:34:43:67:60:c8:a5:0c:98:77:70:06:
         5a:9d:db:d1:da:3e:99:71:5a:17:c6:5f:61:8c:57:ee:b5:d3:
         a2:a9:d9:37:c2:cd:1c:86:e5:62:4c:f1:bb:33:fb:dc:ba:9b:
         7f:2f:89:f5:be:29:3f:8a:cc:16:2b:af:a7:3d:70:f9:04:69:
         10:c5:fd:36:2a:fd:3c:32:56:7a:37:83:3f:fe:cf:e3:4b:fa:
         a6:1c:5d:34:98:9c:00:aa:01:4b:60:a3:42:aa:53:88:c2:42:
         6f:f7:76:62:01:54:9f:e7:82:ac:22:0b:bc:07:11:0d:16:1b:
         37:b9:b6:2c:2b:bb:cf:29:d0:d5:76:b8:c2:88:da:98:34:86:
         64:02:ab:d5:08:a6:29:90:9f:3e:aa:63:30:95:0f:57:93:8e:
         21:4f:bc:13:e8:da:67:51:0a:db:d1:48:14:11:4b:cf:b2:bf:
         e5:f7:e8:98:4a:cc:17:8f:84:81:74:ca:89:79:d9:e6:17:19:
         ce:83:80:4d:af:15:fb:40:1d:da:06:b8:7f:bc:2b:6c:09:eb:
         c6:85:d5:ca:2b:a2:b5:f1:82:e2:15:36:20:f7:32:65:4b:9d:
         3b:d6:79:70:e8:26:3f:b0:01:c7:46:6a:c5:0d:81:07:cd:3a:
         6a:12:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----